
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
File: amXibTSlO_J-8hE5NjBzuia52_o.mft (raw, json)
Hash identifier: stpvKK9mF1GxMoeKaP/RQsKBwOUQExAvKl43bbp6ngI=
Subject key identifier: 4A:AF:A9:B8:35:7F:54:A6:E3:71:2D:6A:8A:C4:5E:A3:EA:74:05:9A
Authority key identifier: 6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA
Certificate issuer: /CN=A914B46A/serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
Certificate serial: 0667
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
Manifest number: 0667
Signing time: Tue 22 Sep 2026 22:17:58 +0000
Manifest this update: Tue 22 Sep 2026 22:17:58 +0000
Manifest next update: Tue 29 Sep 2026 22:17:58 +0000
Files and hashes: 1: amXibTSlO_J-8hE5NjBzuia52_o.crl (hash: hg0HT4xXVkfzPCVtVs6a8HzNDMOzKvAB0/csLHXHxz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl
rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B46A, serialNumber=6A65E26D34A53BF27EF21139363073BA26B9DBFA
Validity
Not Before: Sep 22 22:17:58 2026 GMT
Not After : Sep 29 22:17:58 2026 GMT
Subject: CN=6ab2fe96-4688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:e0:68:4a:4b:94:08:e5:4a:9f:cd:f8:e9:
c0:d4:5d:79:53:e7:62:c3:97:ac:c8:a0:08:03:44:
bc:d5:b5:e5:4c:25:a3:c0:d0:20:c5:80:1e:5c:ee:
cb:39:9e:67:24:27:33:3e:6f:43:df:20:8b:1f:43:
a7:fa:ab:f9:12:03:c7:6c:98:de:d4:d5:8a:58:58:
93:4e:7c:c6:82:9c:8c:5e:2a:ce:30:68:05:f5:69:
06:4e:ed:a2:a8:17:2b:c5:11:75:47:e8:6b:8a:8e:
60:c0:0c:8e:37:d8:e0:d9:44:23:24:0a:5c:89:d6:
63:42:e7:a0:d7:3e:5e:ad:68:09:6d:dc:14:16:37:
d4:e0:d4:a1:15:a6:f7:8d:f5:9d:01:e1:83:30:e8:
6b:aa:dc:f5:54:95:4b:e0:47:af:63:71:08:ec:35:
13:8f:47:ad:63:83:e5:a3:58:fc:12:f0:b3:a0:b1:
d1:73:05:57:cd:66:02:92:a3:da:b0:ce:ff:9e:a5:
50:f5:86:b3:a7:93:8a:72:a5:17:91:35:40:6d:70:
a9:06:e5:0a:04:fb:b7:c1:d9:59:44:d7:bb:9d:18:
1d:82:86:73:5f:f8:04:34:0d:8e:84:d1:73:28:7d:
82:79:75:25:68:ae:be:9a:43:cb:36:95:4a:28:f2:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AF:A9:B8:35:7F:54:A6:E3:71:2D:6A:8A:C4:5E:A3:EA:74:05:9A
X509v3 Authority Key Identifier:
keyid:6A:65:E2:6D:34:A5:3B:F2:7E:F2:11:39:36:30:73:BA:26:B9:DB:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/amXibTSlO_J-8hE5NjBzuia52_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/F7AA509CE09811EB92760B4DC4F9AE02/amXibTSlO_J-8hE5NjBzuia52_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b2:68:34:73:8e:b0:51:31:79:cb:64:90:34:a5:76:d6:44:
ef:17:4b:15:dc:0f:1e:e7:e5:6d:24:e7:38:24:9b:6d:5a:28:
cd:e2:84:74:81:82:df:66:69:53:1a:11:95:0e:88:5d:e6:7a:
95:7b:3c:b7:1a:79:71:78:53:69:8d:4e:73:74:ba:84:57:c1:
0a:aa:f1:69:3b:3b:5a:a6:57:21:db:cf:c2:60:ca:7c:9e:bf:
25:ca:3b:51:7a:a8:34:b4:6e:71:24:17:08:4c:c5:17:d7:ad:
e5:b3:f4:70:a9:e6:a7:ec:89:72:cc:51:f8:68:2f:16:70:3f:
6b:59:eb:e3:a3:b0:c0:b7:ec:be:60:d6:86:8f:1f:ae:45:34:
04:7f:68:34:76:19:78:a8:21:1d:1e:67:c3:47:e1:9c:63:af:
c2:40:6e:cc:1b:e4:61:8c:0e:c3:d5:c9:95:3c:87:e2:17:d0:
79:80:18:02:ed:32:3e:80:96:5f:c9:3e:79:33:77:bc:35:d1:
51:08:da:12:a6:64:23:21:ed:24:1b:fd:66:58:4e:02:6c:0b:
bc:6a:1f:18:7c:99:bc:f2:61:9d:1c:2b:cc:90:16:76:84:f3:
e1:e5:7b:63:e4:72:bf:57:18:d4:c3:bb:b0:db:3a:43:be:b7:
25:66:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:23:00 2026 by rpki-client